Privacy
Policy

A. Account and contact information

KridSpot may collect your name, email address, mobile number, city, state and gender.

B. Sports and event information

Depending on the sport and features being used, KridSpot may also process information such as sport, player role or category, team, auction participation, virtual base value, virtual bidding information, virtual auction result, team allocation, event records, match records, sporting statistics, awards and historical participation information.

C. Images and videos

Where enabled, organisers or authorised users may upload player photographs, participant photographs, team photographs, auction photographs, event videos, tournament media, team logos, sponsor logos and other event-related media.

D. Technical information

When users access KridSpot, certain technical information may be processed automatically, including IP address, browser type, device information, approximate network location, timestamps, login information, security logs and request logs. Some of this information may be processed through infrastructure and security providers such as Cloudflare.

E. Support information

When a user contacts KridSpot, we may retain emails, support requests, complaint information, feedback, correspondence and information provided to resolve the request.

F. Payment and billing records

KridSpot currently arranges paid organiser services directly and does not operate an integrated payment gateway. We may maintain information such as amount paid, invoice details, payment date, transaction reference and payment confirmation.

Organisers may provide information relating to players, team representatives or other participants. Where an organiser provides another person's information to KridSpot, the organiser is responsible for ensuring that they have the appropriate permission, authority, notice, consent or other lawful basis required to provide that information. KridSpot may rely on organisers to communicate appropriate information to participants where the organiser originally collected it.

KridSpot may process information to:

• create and manage accounts and authenticate users
• provide auction functionality, team management and event features
• display auction information and calculate virtual auction values
• maintain completed auction records and event history
• provide customer support and communicate service information
• prevent fraud, secure the Platform and diagnose technical problems
• improve the Platform and maintain business and accounting records
• comply with legal obligations and investigate complaints
• produce event cards, graphics and highlights
• send permitted marketing communications

KridSpot will seek to process personal information only for lawful and appropriate purposes.

Where consent is required by applicable law, KridSpot will seek appropriate consent before processing personal data for the relevant purpose. Consent may be withdrawn where applicable. Withdrawal of consent does not necessarily require deletion of information that KridSpot is legally permitted or required to retain for another lawful purpose. If a user withdraws permission for information necessary to operate their account, some Platform functionality may no longer be available.

Organisers may upload event photographs and videos where this functionality is available. Subject to appropriate permissions having been obtained, KridSpot may process such media to display event information, create auction cards, create team graphics, create event highlights, produce social-media graphics, and promote KridSpot or features of the KridSpot Platform.

Organisers uploading photographs or videos are responsible for ensuring they have the authority and permissions required for the relevant use. A person who believes their image has been used without appropriate permission may contact kridspot@gmail.com.

At present, users who are not logged into KridSpot may primarily see general or static website information. KridSpot may later introduce public pages containing information relating to upcoming auctions, completed auctions, auction moments, teams, event results, sporting statistics and historical event information.

KridSpot may be used in connection with sporting activities involving persons under 18. Where applicable law requires consent from a parent or lawful guardian for processing a child's personal data, KridSpot may require appropriate parental or guardian involvement and verification before permitting relevant processing.

Organisers who provide information relating to minors are responsible for obtaining any permissions they are legally required to obtain. If a parent or guardian believes that a child's personal information has been provided to KridSpot improperly, they may contact kridspot@gmail.com.

KridSpot may use cookies or similar technologies that are necessary for authentication, account sessions, security, remembering essential user preferences and reliable operation of the Platform. Infrastructure providers may also use necessary security technologies to prevent malicious traffic and protect the Service.

KridSpot may use trusted service providers to operate the Platform. Current or anticipated service categories include:

• Cloudflare — for network, security or related infrastructure services
• Zoho Mail — for business email communications
• Hosting and infrastructure providers
• Database infrastructure using PostgreSQL technology
• Backup providers, communications providers and technical support providers

These providers may process information only to the extent necessary for the service they provide or as otherwise permitted by law and their applicable agreements.

KridSpot does not sell users' personal information to advertisers. Personal information may be shared where reasonably necessary with:

• authorised organisers and team or event administrators
• service providers operating the Platform
• professional advisers
• authorities where disclosure is legally required
• another entity involved in a lawful merger, restructuring, financing, acquisition or transfer of the KridSpot business, subject to applicable law

KridSpot may also disclose information where reasonably necessary to protect users, investigate fraud, protect Platform security, enforce legal rights or comply with lawful orders.

Some infrastructure or service providers may operate systems outside the user's state or outside India. Where personal data is transferred or processed outside India, KridSpot will seek to do so in accordance with applicable Indian data-protection requirements and any restrictions applicable at that time.

KridSpot uses reasonable administrative and technical measures designed to protect personal information against unauthorised access, alteration, disclosure, loss or misuse. However, no internet service, database or computer system can be guaranteed to be completely secure. Users are responsible for maintaining the confidentiality of their login credentials and should promptly report suspected account compromise.

Where KridSpot becomes aware of a personal-data breach or security incident, KridSpot may investigate, mitigate and provide notifications to affected individuals or authorities where required by applicable law.

KridSpot does not apply one fixed retention period to every category of data. Personal information may be retained for as long as reasonably necessary to maintain an active account, provide requested services, maintain legitimate event records, resolve disputes, prevent fraud, comply with legal or accounting obligations, maintain security records, or establish or defend legal claims. Information that is no longer necessary will be deleted, anonymised or otherwise handled in accordance with applicable law.

Users may request deletion of their KridSpot account. After a valid deletion request, KridSpot may delete account information that is no longer required. However, deletion of an account does not necessarily erase every historical event record. Completed auction, team, match or sporting records may need to remain so that historical event results are not corrupted. Where reasonably possible, unnecessary contact information will be removed or separated from retained historical records.

Account deletion requests can be sent to kridspot@gmail.com.

Subject to applicable law, users may contact KridSpot to request assistance concerning their personal information, including requests relating to:

• access to information
• correction of inaccurate information
• updating information
• deletion or erasure
• withdrawal of consent
• grievance resolution
• account deletion

Some requests may require identity verification before KridSpot can act on them. Requests can be sent to kridspot@gmail.com. KridSpot will respond in accordance with applicable legal requirements.

KridSpot may send information about Platform features, services or offers where legally permitted. Users may request to stop receiving promotional communications by using an unsubscribe mechanism where provided, or by contacting KridSpot directly. Users may continue receiving essential account, security, transactional or service-related communications.

Users and organisers should keep information provided to KridSpot accurate and current. Where an organiser controls participant information, requests to correct event information may need to be coordinated with that organiser.

KridSpot intends to operate its privacy practices in accordance with applicable Indian law, including data-protection requirements as and when particular statutory provisions become applicable to KridSpot. This Policy may therefore be updated as regulatory requirements, government notifications and Platform functionality evolve.

KridSpot may update this Privacy Policy when Platform functionality changes, new categories of data are introduced, new service providers are used, public features are introduced, payment functionality changes or legal requirements change. The current version will display its effective or last-updated date. Material changes may be communicated through the Platform or another appropriate method where required.